Blue, Red, Purple, White - Which Team Are You On?

Explore the intricacies of cybersecurity team dynamics in this conference talk from Security Onion Conference 2018. Delve into the roles of Blue, Red, Purple, and White teams as Don Murdoch, known as @BlueTeamHB, breaks down key range terms and network concepts. Gain insights into the Regent's Range setup, including network layout and components, and discover various scenarios and use cases for Security Onion. Learn about BT3 client-side operations and how Snort detects Trojan behavior. Examine available open-source tools and techniques for packet analysis. Follow along as Murdoch guides you through a cybersecurity investigation, covering common tasks and actionable findings. Explore on-the-wire scenarios and the process of adding data sources. Compare different views of application usage to enhance your understanding of comprehensive security monitoring and response strategies.